DevSecOps/Data Protection Officer

VisionGroup; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

VisionGroup in Singapore is seeking an experienced DevSecOps / Data Protection Officer to design secure cloud architecture, drive DevOps, platform engineering, and data protection across our AI products and technology platforms.

You will lead security controls, risk management, and regulatory compliance, including Singapore PDPA, ISO 27001, and SOC 2, while collaborating with Engineering, Product, and Management.

Qualifications

• Minimum 4 years of cloud architecture, DevOps, or security experience.
• Strong knowledge of PDPA and data protection governance.
• Experience with ISO 27001 and SOC 2 frameworks.
• Ability to design secure, scalable cloud architectures.

Responsibilities

• Design secure, scalable cloud architectures and CI/CD pipelines.
• Lead security controls including IAM, MFA, RBAC, secret management.
• Coordinate vulnerability assessments, pen tests, and audits.
• Oversee data protection policies, retention, cross-border transfers.
• Report on security posture and compliance to management.

Skills

Cloud architecture

Kubernetes

CI/CD

Infrastructure as Code

Security risk assessment

Data protection

Tools

AWS

Azure

GCP

CKA/CKS

CISSP

CISM

ISO 27001

Job description

We are seeking an experienced and hands-on DevSecOps / Data Protection Officer (DPO) to manage cloud architecture design, DevOps, platform engineering, cybersecurity, and data protection for our AI products and technology platforms.

The ideal candidate will be responsible for designing secure, scalable, resilient, and cost-efficient system architectures while implementing security controls, managing technology risks, and ensuring compliance with applicable data protection regulations. This role requires strong technical leadership, architectural decision-making, and the ability to work independently across Engineering, Product, Solutioning, and management teams.

Key Responsibilities

1. Cloud Architecture & Technical Design

• Design and maintain secure, scalable, highly available, and cost-effective cloud infrastructure and platform architectures.
• Define architecture standards for Kubernetes, containers, microservices, APIs, databases, networking, and multi-tenant environments.
• Review system designs, evaluate technology choices, identify architectural risks, and recommend improvements to performance, scalability, reliability, and maintainability.
• Maintain architecture diagrams, technical documentation, and architecture decision records.
• Design and manage CI/CD pipelines, deployment automation, Infrastructure as Code, and release management.
• Establish monitoring, logging, alerting, backup, disaster recovery, and production reliability practices.
• Troubleshoot infrastructure incidents, optimise cloud resource utilisation, and improve system availability and operational efficiency.

3. Cybersecurity & DevSecOps

• Establish and maintain security policies, standards, controls, and risk management processes.
• Implement security practices covering IAM, MFA, RBAC, secrets management, vulnerability management, security scanning, and incident response.
• Coordinate vulnerability assessments, penetration testing, security audits, and remediation activities.
• Assess AI security risks, including prompt injection, sensitive data leakage, unauthorised AI agent actions, and cross-tenant data exposure.
• Support applicable security frameworks and certifications, such as ISO 27001 and SOC 2.

4. Data Protection & Privacy (DPO)

• Serve as the company's designated Data Protection Officer for applicable Singapore PDPA responsibilities.
• Establish data protection policies and oversee personal data handling, retention, deletion, and cross-border transfers.
• Conduct or coordinate privacy impact assessments and review data protection risks involving AI systems, customer data, cloud platforms, and third-party service providers.
• Coordinate personal data incident assessments, escalation, and applicable regulatory notifications.
• Maintain privacy compliance documentation, risk registers, and relevant records.

5. Technical & Operational Governance

• Proactively monitor infrastructure health, security risks, vulnerabilities, and recurring technical issues.
• Collaborate with Product, Solutioning, Engineering, DevOps, and management to ensure secure and consistent architecture and deployment practices.
• Establish clear ownership and remediation timelines for identified risks and technical issues.
• Report on architecture improvements, infrastructure reliability, security posture, and compliance status to management.

Requirements

• Minimum 4 years of relevant experience in cloud architecture, DevOps, DevSecOps, cybersecurity, or information security.
• Strong hands-on knowledge of cloud platforms, Kubernetes, containerisation, microservices, CI/CD, Infrastructure as Code, and system architecture design.
• Experience in cloud security, IAM, vulnerability management, incident response, and security risk assessments.
• Working knowledge of Singapore PDPA and data protection governance.
• Familiarity with security frameworks such as ISO 27001 and SOC 2.
• Strong analytical, problem-solving, documentation, and communication skills.
• Able to work independently, take ownership, manage priorities, and collaborate effectively across technical and business teams.

Preferred Qualifications

• Relevant certifications in cloud architecture, Kubernetes, cybersecurity, or information security, such as AWS/Azure/GCP, CKA/CKS, CISSP, CISM, or ISO 27001.
• Experience with SaaS platforms, AI/LLM integrations, and multi-tenant cloud environments.
• Experience supporting security audits, compliance programmes, or certification initiatives.